Frame 7328: Packet, 578 bytes on wire (4624 bits), 578 bytes captured (4624 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 21, 2017 01:00:52.686526000 UTC UTC Arrival Time: Nov 21, 2017 01:00:52.686526000 UTC Epoch Arrival Time: 1511226052.686526000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 92.000 microseconds] [Time since reference or first frame: 46.820786000 seconds] Frame Number: 7328 Frame Length: 578 bytes (4624 bits) Capture Length: 578 bytes (4624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:http:data] Character encoding: ASCII (0) Ethernet II, Src: Netgear_8d:2e:93 (74:44:01:8d:2e:93), Dst: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) Destination: HewlettPacka_d7:16:7c (00:1a:4b:d7:16:7c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Netgear_8d:2e:93 (74:44:01:8d:2e:93) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 0] Internet Protocol Version 4, Src: 213.186.33.87, Dst: 10.4.1.102 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 564 Identification: 0xdd71 (56689) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: TCP (6) Header Checksum: 0x58d7 [validation disabled] [Header checksum status: Unverified] Source Address: 213.186.33.87 Destination Address: 10.4.1.102 [Source GeoIP: Saran, FR] [Source GeoIP City: Saran] [Source or Destination GeoIP City: Saran] [Source GeoIP Country: France] [Source or Destination GeoIP Country: France] [Source GeoIP ISO Two Letter Country Code: FR] [Source or Destination GeoIP ISO Two Letter Country Code: FR] [Source GeoIP Latitude: 47.9531] [Source or Destination GeoIP Latitude: 47.9531] [Source GeoIP Longitude: 1.871] [Source or Destination GeoIP Longitude: 1.871] [Stream index: 13] Transmission Control Protocol, Src Port: 80, Dst Port: 49166, Seq: 3754937, Ack: 1736, Len: 524 Source Port: 80 Destination Port: 49166 [Stream index: 8] [Stream Packet Number: 7014] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 524] Sequence Number: 3754937 (relative sequence number) Sequence Number (raw): 2950371318 [Next Sequence Number: 3755461 (relative sequence number)] Acknowledgment Number: 1736 (relative ack number) Acknowledgment number (raw): 1000187045 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64240 [Calculated window size: 64240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5808 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 [Timestamps] [Time since first frame in this TCP stream: 5.277670000 seconds] [Time since previous frame in this TCP stream: 92.000 microseconds] [SEQ/ACK analysis] [iRTT: 146.882000 milliseconds] [Bytes in flight: 2096] [Bytes sent since last PSH flag: 524] [Client Contiguous Streams: 1] [Server Contiguous Streams: 56] TCP payload (524 bytes) Hypertext Transfer Protocol File Data: 524 bytes Data (524 bytes) 0000 24 30 75 1a 8b 4c 24 24 83 44 24 1c 04 83 c6 04 $0u..L$$.D$..... 0010 83 e9 04 89 4c 24 24 73 dd 83 f9 fc 74 56 8b 7c ....L$$s....tV.| 0020 24 1c 8a 0e 3a 0f 8b 7c 24 18 75 41 83 7c 24 24 $...:..|$.uA.|$$ 0030 fd 74 41 8b 5c 24 1c 8a 4e 01 3a 4b 01 8b 5c 24 .tA.\$..N.:K..\$ 0040 30 75 2a 83 7c 24 24 fe 74 2a 8b 7c 24 1c 8a 4e 0u*.|$$.t*.|$..N 0050 02 3a 4f 02 8b 7c 24 18 75 13 83 7c 24 24 ff 74 .:O..|$.u..|$$.t 0060 13 8a 4e 03 8b 74 24 1c 3a 4e 03 74 07 1b c9 83 ..N..t$.:N.t.... 0070 c9 01 eb 02 33 c9 85 c9 0f 85 3d 11 c9 ff 8b 72 ....3.....=....r 0080 08 80 7e 0d 00 74 10 ff 76 04 8b 46 08 ff 36 ff ..~..t..v..F..6. 0090 d0 83 c4 08 88 46 0d ff 73 08 68 78 95 62 10 6a .....F..s.hx.b.j 00a0 40 e8 12 b5 c9 ff 8b 6c 24 54 8b 35 b8 6f 67 10 @......l$T.5.og. 00b0 83 c4 0c e9 4f 12 c9 ff 39 56 04 0f 85 22 14 c9 ....O...9V...".. 00c0 ff 89 54 24 1c 83 6c 24 1c 04 89 44 24 24 72 31 ..T$..l$...D$$r1 00d0 8b 44 24 20 8b 4c 24 24 8b 00 3b 01 8b 4c 24 3c .D$ .L$$..;..L$< 00e0 75 26 8b 44 24 20 83 44 24 24 04 8b 5c 24 2c 83 u&.D$ .D$$..\$,. 00f0 c0 04 83 6c 24 1c 04 89 44 24 20 73 d7 8b 44 24 ...l$...D$ s..D$ 0100 18 83 7c 24 1c fc 74 76 8b 44 24 20 8b 54 24 24 ..|$..tv.D$ .T$$ 0110 8a 00 3a 02 8b 54 24 28 75 51 83 7c 24 1c fd 74 ..:..T$(uQ.|$..t 0120 59 8b 44 24 20 8b 5c 24 24 8a 40 01 3a 43 01 8b Y.D$ .\$$.@.:C.. 0130 5c 24 2c 75 36 83 7c 24 1c fe 74 3e 8b 44 24 20 \$,u6.|$..t>.D$ 0140 8b 4c 24 24 8a 40 02 3a 41 02 8b 4c 24 3c 75 1b .L$$.@.:A..L$